Siemens SICORE Base system
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
1critical0high0medium0low
updated 2026-10-27
01
vulnerabilities (9)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-3596US | critical9.0OT high | Exploit |
| CVE-2024-31485US | — | — |
| CVE-2026-54801US | — | — |
| CVE-2024-39601US | —OT elevated | — |
| CVE-2024-37998US | — | — |
| CVE-2026-54798US | —OT elevated | — |
| CVE-2026-27664US | — | — |
| CVE-2026-54800US | —OT elevated | — |
| CVE-2026-54799US | —OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-489Active Debug Code2 CVEs
- CWE-620Unverified Password Change2 CVEs
- CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
- CWE-294Authentication Bypass by Capture-replay1 CVEs
- CWE-306Missing Authentication for Critical Function1 CVEs
- CWE-347Improper Verification of Cryptographic Signature1 CVEs
- CWE-354Improper Validation of Integrity Check Value1 CVEs
- CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
03
sources (4)
Which sources assert this record, and when.
- USCISA CSAF OT advisories (ICS)9 CVEs
- DESiemens ProductCERT (CSAF)9 CVEs
- EUEU Vulnerability Database (ENISA)8 CVEs
- NLNCSC-NL (CSAF)4 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan